Gemalto CEO: HCE Not Secure for EMV Payments Unless Tokens Stored on Secure Elements or TEE

France-based vendor Gemalto Thursday confirmed its growth projections for 2014 and its longer-term forecast for 2017, despite the recent announcements of support for host-card emulation by Visa and MasterCard Worldwide.

Gemalto, the world’s largest smart card supplier and also the largest trusted service manager, has much to lose if pure host-card emulation, or HCE, takes off. It would enable banks and other service providers to avoid putting their applications on NFC SIMs, like the ones Gemalto supplies by the millions to mobile operators; or to require the hiring of a TSM to manage those applets over the air on the SIMs or other secure elements. 

Gemalto CEO Olivier Piou, while he questioned the inherent security of HCE for EMV payments, sought to put a positive face on the growing interest in the technology, in comments to financial analysts Thursday, following release of the company’s fourth quarter and year-end results. 

Among other things, HCE represents an endorsement of NFC by “all the main players of this ecosystem” for NFC, including Visa, MasterCard and Google, said Piou, who added that HCE would add momentum to the deployment of contactless point-of-sale terminals by merchants. In addition, he acknowledged that HCE enables easier development of applications for use with NFC phones, compared with secure elements. 

Some major telcos, including the Isis joint venture, have been using similar talking points, especially since Visa and MasterCard made their HCE announcements Feb. 19. 

But Piou, like the mobile operators, is taking a position on security that doesn’t quite match that of Visa and MasterCard or to jibe with the strict definition of HCE. Gemalto and the telcos are arguing that HCE is suited for such low-security applications as loyalty and couponing, not for open-loop payment. 

In this article: 

Words

3,500 

Among Topics Covered:

  • Gemalto CEO’s Olivier Piou’s contention that EMV tokens for HCE can't be secure in phone memory
  • Position of Visa and MasterCard on security of tokens and HCE
  • Piou: Decision on HCE security belongs to banks
  • Gemalto’s year-end revenue and profit report and multiyear goals
  • Review of hybrid approach to putting tokens on secure elements for cloud-based NFC payments
  • Oberthur’s take on HCE security
  • Isis’ view of HCE
  • Piou’s comments on Gemalto’s MCX contract and response to question about role vis-à-vis Paydiant 

Sources Quoted: 

Olivier Piou, CEO, Gemalto
Cédric Collomb, managing director, telecom, Oberthur Technologies
Scott Mulloy, CTO, Isis
Jorn Lambert, group executive, digital convergence, MasterCard 

Among companies and organizations mentioned:

Gemalto
Visa
MasterCard
Isis
Oberthur
MCX
Paydiant 

This is premium content from NFC Times.

Read Full Article 

© NFC Times and Forthwrite Media. NFC Times content cannot be copied or distributed without the express permission of the publisher.

HEADLINE NEWS

Apple Enables Virtual SmarTrip Fare Card for Apple Pay in Washington, D.C., with More Closed-Loop Transit Cards Expected This Year in U.S.

NFC TIMES Exclusive Insight – Apple added support for its latest closed-loop transit card for Apple Pay, enabling customers of the Washington Metropolitan Area Transit Authority, or WMATA, to tap their NFC-enabled iPhones and Apple Watches to pay for rides with WMATA’s SmarTrip virtual card.

Insight: Apple’s Long Game Pays Off, Conquering Resistance to Apple Pay from Banks in Europe and Beyond

NFC TIMES Exclusive Insight – It’s coming up on six years since Apple announced its groundbreaking digital-payments service, Apple Pay. And while consumer adoption remains a work in progress, Apple has had considerable success gaining participation from banks and other issuers in what is now more than 50 countries worldwide.

Transit Agency in Canada Plans to Launch Mobile Ticketing, Citing Covid Fears

NFC TIMES Exclusive Insight – Another transit agency in Canada has announced it will enable mobile ticketing, along with reloadable contactless cards, citing in part the Covid-19 pandemic and the desire to reduce the use of cash, vending machines and customer interaction with agency staff.

Biggest U.S. Supermarket Chain Trials Contactless as Covid-19 Fears Increase Demand for ‘No-Touch Payments’

NFC TIMES Exclusive Insight – The announcement by The Kroger Co., the largest supermarket chain in the U.S., that it has begun trialing contactless payments in a subsidiary indicates that one of the last major holdouts among big U.S. merchants will eventually accept such NFC payments services as Apple Pay and Google Pay, as well as contactless bank cards.

Southern California Transit Agency to Sell Tickets Via Google Maps and Google Pay; Others Expected to Follow

NFC TIMES Exclusive Insight – There’s more evidence that popular trip-planning apps Transit, Moovit and Google Maps are seeking to expand further into mobile ticketin

Insight: Apple Buys Mobile-POS Firm as It Seeks to Expand Acceptance of Contactless Payments

NFC TIMES Exclusive Insight – In a move seeking to expand the base of merchants that can accept its payments service, Apple Pay, Apple has reportedly acquired Montreal, Canada-based mobile POS company Mobeewave, which could enable small shop owners, restaurants and street vendors, among others, to more easily accept contactless EMV cards and NFC mobile wallets.

Exclusive: Google Tests Mobile Ticketing Initiated in Maps App; Could Lead to Mobility-as-a-Service Offer?

Jul 23 2020

NFC TIMES Exclusive – Three small public transit agencies in the U.S. are quietly testing use of Google Maps and Google Pay to enable customers to first plan then pay for tickets. It’s believed to be the first pilots of its kind for Google, a move that could mean the search giant plans to compete with such popular trip-planning apps as Transit and Moovit, which are starting to enable public transit ticketing and payments, NFC Times reports.

Los Angeles Transit Authority to Support Closed-Loop TAP Card in Both Apple Pay and Google Pay

Jul 17 2020

NFC TIMES Exclusive Insight – The Los Angeles County Metropolitan Transportation Authority, or Metro, plans to introduce an Android version of its TAP closed-loop fare card, with a virtual TAP card for the Google Pay wallet, a Metro spokesman confirmed to NFC Times.

Uber Expands Mobile Ticketing to More U.S. Public Transit Agencies

NFC TIMES Exclusive – As expected, Uber today has expanded support for public transit ticketing in its app again, this time to a consortium of 13 small and mid-tier transit agencies in Ohio and Northern Kentucky–following two other U.S. transit agencies, in Denver and Las Vegas, which have already integrated with Uber–it was announced today. NFC Times had reported the planned move in late May. 

Open-Loop Fare Payments Rollouts Continue Post-Lockdowns, with Italy’s Fourth Largest City Latest to Launch Service

NFC TIMES Exclusive Insight – Another of Italy’s major cities has launched open-loop fare collection, with Turin enabling customers to pay for rides on its one-line metro and certain bus routes by tapping their contactless EMV credit and debit cards, along with smartphones and smartwatches supporting NFC payments services.

Calgary Transit Launches Mobile-Ticketing Service with Plans to Expand to Open Loop

NFC TIMES Exclusive Insight – Canada’s third largest city, Calgary, has introduced its first electronic fare payments service, offering mobile ticketing from a software-as-a-service platform provider, with plans to enable customers to pay for fares with their contactless EMV credit and debit cards and NFC wallets.

As E-Commerce Surges, Major U.S. Payments Networks Announce Plans to Expand Click to Pay Globally

NFC Times Exclusive Insight – As e-commerce continues to grow in importance as Covid-19 lockdowns ease, four major U.S. payments networks announced today they are laying the groundwork to expand their uniform e-commerce checkout platform internationally.